Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e20323632323536.roa
File:                     3230312e3135392e3136382e302f32312d3234203d3e20323632323536.roa (raw, json)
Hash identifier:          K7Yt8WUbfFR22Ki1d0U16O+OVXG1ZqMRIGIc/fhjb6Q=
Subject key identifier:   01:8A:0F:05:8A:15:E1:81:C7:83:04:66:1E:33:35:3F:AA:08:55:9D
Certificate issuer:       /CN=B06551473984A7D021CE4C930068D4DD4CBA142A
Certificate serial:       23A58CBD9FEE919EEFA56561D4B8C1D9673C6281
Authority key identifier: B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e20323632323536.roa
Signing time:             Tue 05 Mar 2024 17:46:33 +0000
ROA not before:           Tue 05 Mar 2024 17:41:33 +0000
ROA not after:            Tue 04 Mar 2025 17:46:33 +0000
asID:                     262256
IP address blocks:        201.159.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 14:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a5:8c:bd:9f:ee:91:9e:ef:a5:65:61:d4:b8:c1:d9:67:3c:62:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B06551473984A7D021CE4C930068D4DD4CBA142A
        Validity
            Not Before: Mar  5 17:41:33 2024 GMT
            Not After : Mar  4 17:46:33 2025 GMT
        Subject: CN=018A0F058A15E181C78304661E33353FAA08559D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:15:73:a7:42:0f:82:2d:2a:2b:88:d7:14:
                    7c:fa:24:3d:f5:00:ca:bd:69:eb:a0:49:30:ee:8c:
                    44:de:5b:ed:1b:08:53:1c:d8:51:11:14:5d:74:01:
                    c8:ea:bf:fc:52:8d:bc:fc:43:18:db:f4:39:ec:d9:
                    a3:41:5c:b4:e2:68:5c:94:1b:50:82:77:50:10:bf:
                    8b:f6:20:fc:dc:97:36:08:19:05:c8:bc:2a:50:bc:
                    81:b1:c7:cf:14:06:27:c3:c8:c1:ea:d6:fb:d7:23:
                    bd:c4:8e:33:e9:77:9e:1a:ad:50:f0:02:0b:40:57:
                    f2:00:38:b0:f7:6a:cf:92:0a:e4:3e:50:3e:29:59:
                    a8:1c:b0:34:c9:0f:fa:ee:ea:a9:18:b2:2b:96:a1:
                    b3:2c:3d:c6:ae:be:18:b2:9e:29:ab:6d:db:c1:f9:
                    cf:7b:f6:ca:10:ff:f2:6f:fb:99:87:78:8f:75:3e:
                    2e:a5:e0:fe:f4:5a:97:07:88:f3:32:d7:2f:cd:e3:
                    e2:7d:35:5f:cc:85:4a:a5:3d:e4:3a:ea:74:e8:3c:
                    40:69:e4:e9:cc:9a:18:ff:6e:aa:68:5b:7c:b3:84:
                    42:6c:ee:3e:07:80:5b:c4:7d:41:ed:c7:ef:4d:0e:
                    5c:c7:0c:32:59:57:7a:95:8c:aa:19:29:19:37:04:
                    42:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8A:0F:05:8A:15:E1:81:C7:83:04:66:1E:33:35:3F:AA:08:55:9D
            X509v3 Authority Key Identifier:
                keyid:B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e20323632323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:09:e5:bc:98:71:d7:f8:98:8a:ee:fa:e9:ba:b0:81:d6:67:
         c4:32:ab:eb:12:4c:c5:fc:f6:79:3d:4d:27:43:50:bc:7e:bc:
         f2:9b:13:c3:3a:14:d3:a8:ab:92:4a:49:ef:e6:14:e1:be:eb:
         b5:2a:78:37:71:bb:1d:17:99:cc:a6:c2:83:e6:32:ad:bc:b7:
         02:95:1a:6e:24:64:e7:da:9e:c9:ca:76:0a:8e:69:3a:dc:5f:
         fa:92:a7:3e:b9:ad:ed:ed:a5:72:52:eb:4c:f8:b0:fb:6b:3f:
         34:26:01:ad:1c:4f:bc:1c:45:57:c6:a1:29:76:61:17:b3:8f:
         b4:41:cc:f8:c0:fb:46:c0:71:47:8b:1c:89:ae:77:37:2f:a2:
         ca:a5:10:56:cd:40:a7:86:3a:4e:94:53:28:8b:07:50:5c:71:
         6a:87:82:00:9b:81:0d:ab:6f:55:c9:d3:8b:a0:43:df:1f:7b:
         0d:11:2f:bb:6c:16:23:4d:a4:6b:bb:9e:12:ed:5f:78:59:e7:
         2d:c6:7d:22:74:1c:c6:ba:51:e0:ba:e3:a5:a1:06:7c:31:95:
         26:6e:27:3e:b9:7c:03:c9:b7:d1:2f:f7:84:e0:a5:45:9d:fd:
         1a:c8:67:7c:96:a5:31:26:66:9f:95:be:2b:3d:fb:65:da:71:
         2e:1b:1d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 00:38:46 2024 by rpki-client on console-fra.rpki-client.org